Lucene search
+L

1426 matches found

CVE
CVE
•added 2026/03/30 9:56 a.m.•30 views

CVE-2026-1612

AL-KO Robolinho Update Software contains hard-coded AWS Access and Secret keys that grant at least read access to objects in an AWS bucket. The vulnerability is documented for version 8.0.21.0610 as vulnerable; other versions were not tested and may also be affected. No remediation details are pr...

6.9CVSS5.8AI score0.00392EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/30 9:56 a.m.•13 views

CVE-2026-1612

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

6.9CVSS5.8AI score0.00392EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/30 9:56 a.m.•8 views

CVE-2026-1612 Hard-coded AWS Key in AL-KO Robolinho Update Software

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

6.9CVSS5.8AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/30 9:56 a.m.•42 views

CVE-2026-1612 Hard-coded AWS Key in AL-KO Robolinho Update Software

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

6.9CVSS0.00392EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•1 views

CVE-2026-1612: Use of Hard-coded Credentials

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

6.9CVSS5.8AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/30 12:00 a.m.•25 views

AL-KO Robolinho Update Software 信任管理问题漏洞

AL-KO Robolinho Update Software is a firmware update tool developed by the German company AL-KO. Version 8.0.21.0610 of AL-KO Robolinho Update Software contains a vulnerability related to trust management. This vulnerability stems from hard-coded AWS keys, which may allow unauthorized access to A...

6.9CVSS5.8AI score0.00392EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•15 views

PT-2026-32344

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component where the mtype del function fails to drop logically empty buckets. The function counts empty slots below n-pos in k, but only drops the...

5.5CVSS6AI score0.0012EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/03/30 12:00 a.m.•19 views

PT-2026-29008

AL-KO Robolinho Update Software has hard-coded AWS Access and Secret keys that allow anyone to access AL-KO's AWS bucket. Using the keys directly might give the attacker greater access than the app itself. Key grants AT LEAST read access to some of the objects in bucket. The vendor was notified...

6.9CVSS5.9AI score0.00392EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/03/28 12:24 a.m.•13 views

SUSE CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/03/27 5:12 p.m.•13 views

EUVD-2026-16464

Incus vulnerable to denial of source through crafted bucket backup file...

6.5CVSS5.9AI score0.00444EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/03/27 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-33743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access t...

6.5CVSS6.9AI score0.00444EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/03/26 11:26 p.m.•11 views

CVE-2026-33743

A flaw was found in Incus, a system container and virtual machine manager. A user with access to Incus' storage bucket feature can exploit this vulnerability by using a specially crafted storage bucket backup. This can cause the Incus daemon to crash, leading to a denial of service of the control...

6.5CVSS5.7AI score0.00444EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/26 11:16 p.m.•13 views

CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS0.00444EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/26 11:16 p.m.•11 views

DEBIAN-CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS7AI score0.00444EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/26 11:16 p.m.•14 views

UBUNTU-CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2026/03/26 11:16 p.m.•12 views

CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/03/26 10:40 p.m.•14 views

CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/03/26 10:40 p.m.•13 views

CVE-2026-33743 Incus vulnerable to denial of source through crafted bucket backup file

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS5.8AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/26 10:40 p.m.•35 views

CVE-2026-33743 Incus vulnerable to denial of source through crafted bucket backup file

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS0.00444EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2026/03/26 10:40 p.m.•39 views

CVE-2026-33743

Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated use of this attack can be used to keep the server offline causing a...

6.5CVSS5.8AI score0.00444EPSS
SaveExploits1References1
Rows per page
Query Builder